CVE-2026-95109: CWE-125 Out-of-bounds Read in Eclipse Foundation Eclipse ThreadX

The vulnerability in Eclipse ThreadX's Cortex-A7 MMU Modules port stems from improper validation of caller-supplied buffers. Instead of validating the entire buffer range, the implementation only checks the first byte's address for user readability. Consequently, any buffer whose first byte is readable passes the range check regardless of the rest of the buffer's size. Privileged dispatch code then reads or writes the entire buffer, potentially accessing memory out-of-bounds. This flaw is systemic because all protected-module dispatchers rely on the same macro for buffer validation, making the vulnerability widespread across services that consume buffers or extra-parameter arrays.

This vulnerability allows privileged dispatch code to perform out-of-bounds memory reads or writes beyond the validated buffer, potentially leading to memory corruption, data leakage, or system instability. Given the high CVSS score (8.5) and the nature of the flaw, it poses a significant risk to system integrity and confidentiality in affected versions of Eclipse ThreadX.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. No official fix or patch links are provided in the available data. Until a patch is available, users should monitor vendor communications for updates. No vendor advisory states that no action is required or that the issue is mitigated.